Who We Are
BriskVTU is a virtual top-up and utility payment platform. BriskVTU is a subsidiary company of SolutionsCrafts LLC, a company registered in the United States, and operates as one of several businesses within the SolutionsCrafts group. We build the BriskVTU mobile applications for iOS and Android and the website at briskvtu.com (together, the "Services").
Our purpose is narrow and practical: we let people — particularly Nigerians living abroad — pay for airtime, mobile data, electricity and cable television for recipients in Nigeria. This policy explains what personal information we collect while doing that, why we collect it, who we share it with, and the choices you have.
Throughout this policy, "we", "us" and "BriskVTU" mean BriskVTU and, where relevant, its parent company SolutionsCrafts LLC acting as data controller. "You" means anyone who creates an account, uses our apps, or visits our website.
Information We Collect
Information you give us directly
- Account details — your name, email address, phone number and country of residence when you register.
- Recipient details — the Nigerian phone numbers, electricity meter numbers and cable TV smartcard or IUC numbers you enter to pay for, along with any nicknames you save them under (for example "Mummy Lagos").
- Transaction instructions — the service, network, provider, plan and amount you select.
- Coupon and referral data — coupon names, codes, values and expiry dates you create, and the referral code you use or share.
- Support correspondence — anything you send us by email, phone or through the in-app support channel.
Information collected automatically
- Device and technical data — device model, operating system version, app version, language, time zone and IP address.
- Usage data — which screens you open, which services you use and when, and errors or crashes the app encounters.
- Transaction records — a timestamped history of every payment, cashback credit, refund and coupon redemption on your account.
Payment information
When you fund your BriskVTU wallet with a debit or credit card, the card details are entered into and processed by our third-party payment processor. We do not receive, see or store your full card number, expiry date or CVV. What we receive back is a secure token, the card brand, the last four digits, and whether the charge succeeded — enough to display your saved card and reconcile your wallet, and nothing more.
How We Use Your Information
| What we use it for | What that involves |
|---|---|
| Delivering transactions | Passing the recipient number, provider and amount to the relevant network, distribution company or aggregator so the top-up actually reaches them. |
| Running your account | Maintaining your wallet balance, cashback balance, saved beneficiaries, transaction history and saved cards. |
| Rewards | Calculating and crediting cashback, validating coupon redemptions, and tracking referral eligibility and earnings. |
| Security and fraud prevention | Verifying accounts, detecting unusual activity, preventing unauthorised access, and protecting against fraudulent or abusive transactions. |
| Support | Answering your questions, investigating failed transactions and issuing refunds. |
| Service improvement | Understanding which features are used, diagnosing crashes and fixing problems. |
| Legal obligations | Meeting record-keeping, anti-fraud, tax and other requirements that apply to us. |
Where the law requires a lawful basis for processing — for example under the UK and EU General Data Protection Regulation — we rely on performance of a contract (delivering the service you asked for), legitimate interests (security, fraud prevention and improving the product), legal obligation, and consent where consent is specifically required.
International Data Transfers
BriskVTU exists specifically to move value between countries, so cross-border data transfer is inherent to the service. We are based in the United States, and our users are located across the United States, United Kingdom, Canada, Italy, Germany, the Netherlands, Spain, South Africa, Nigeria and elsewhere. Transaction data necessarily reaches Nigeria, where the recipient's network or utility provider fulfils the top-up.
This means your personal information may be stored in or accessed from countries whose data protection laws differ from those in your own country. Where we transfer personal information out of the United Kingdom or the European Economic Area, we rely on appropriate safeguards such as Standard Contractual Clauses, and take reasonable steps to ensure the information stays protected to the standard described in this policy.
How Long We Keep Information
We keep personal information only as long as we need it for the purpose it was collected, and to meet our legal and accounting obligations.
- Account information — for as long as your account is open. If you close your account we delete or anonymise your profile within a reasonable period.
- Transaction records — retained after account closure where required by financial record-keeping, tax and anti-fraud obligations.
- Support correspondence — kept for a limited period so we can handle follow-up queries and disputes.
- Technical and analytics logs — typically kept for a short period and then deleted or aggregated so individuals can no longer be identified.
How We Protect Your Information
We use industry-standard measures to protect personal information, including encryption of data in transit, hashing of credentials before storage, access controls that limit who inside our organisation can view personal data, and secure payment gateways operated by specialist providers.
Your Rights and Choices
Depending on where you live, you may have some or all of the following rights over your personal information:
- Access — request a copy of the personal information we hold about you.
- Correction — ask us to correct information that is inaccurate or incomplete. Most account details can be edited directly in the app.
- Deletion — ask us to delete your personal information, subject to records we must legally retain.
- Restriction and objection — ask us to limit how we use your information, or object to certain processing.
- Portability — receive your information in a structured, commonly used format.
- Withdraw consent — where we rely on consent, withdraw it at any time without affecting processing already carried out.
- Complain — lodge a complaint with your local data protection authority.
Users in the European Economic Area and United Kingdom have these rights under the GDPR and UK GDPR. Users in Nigeria have comparable rights under the Nigeria Data Protection Act. Users in California have rights under the CCPA/CPRA, including the right to know what is collected and the right to opt out of "sale" or "sharing" of personal information — and we confirm that we do not sell or share personal information as those terms are defined.
To exercise any of these rights, email hello@briskvtu.com. We will respond within the timeframe required by applicable law and may need to verify your identity before acting.
Cookies and Similar Technologies
Our website uses a small number of cookies and similar technologies to remember your preferences — for example whether you have chosen light or dark mode, which is stored locally in your browser — and to understand aggregate site usage. We do not use advertising or cross-site tracking cookies.
Most browsers let you refuse or delete cookies through their settings. Blocking cookies may affect how parts of the site behave, but will not prevent you from using the BriskVTU apps.
The BriskVTU mobile apps do not use browser cookies, but do use device identifiers and local storage to keep you signed in and to record crash and performance data.
Children's Privacy
The Services are intended for adults. We do not knowingly collect personal information from anyone under 18 years of age, and our Terms of Service require account holders to be at least 18. If you believe a child has provided us with personal information, contact hello@briskvtu.com and we will delete it promptly.
Third-Party Links and Services
Our website and apps may link to third-party sites and services, including the Apple App Store, Google Play and our social media profiles. This policy does not cover those services, and we are not responsible for their privacy practices. We encourage you to read the privacy policy of any third party before providing information to them.
Changes to This Policy
We may update this Privacy Policy as our services, technology or legal obligations change. When we do, we will revise the "Last updated" date at the top of this page. If the changes are significant, we will provide additional notice — through the app, by email, or by a prominent notice on our website — before they take effect.
Continuing to use the Services after an updated policy takes effect means you accept the revised policy.
Contact Us
If you have questions about this Privacy Policy, want to exercise your rights, or wish to make a complaint about how we handle personal information, contact us:
160 Alewife Brook Pkwy #1192
Cambridge, MA 02138
United States